Cybersecurity Engineer

teKnoluxion•St. Louis, MO

1d•$113,000 - $139,000•Hybrid

About The Position

At Bcore, our strength comes from how we deliver impact to the mission. Whether it’s architecting critical IT solutions, producing actionable intelligence, or developing cutting edge technology, we succeed because of the expertise, collaboration, and agility of our teams. Our Mission Services division combines enterprise IT, cloud solutions, DevSecOps, systems engineering, software development, and operational support. Bcore accelerates decisive advantage for warfighters and intelligence professionals by fusing human insight, rapid-fire engineering, precision-measured outcomes, and relentless grit into mission-ready solutions. Do you want to join a team that is building tailored technical solutions to modernize our government’s mission and our client’s business? Do you have a desire to change how people work? Are you interested in helping to protect our nation’s cyber interests? Join our growing team as a Cybersecurity Engineer, supporting the NGA customer mission.

Requirements

Active TS (SCI eligibility) clearance and eligibility to obtain a CI poly
Bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical discipline, or an equivalent combination of education, technical training, or relevant military/work experience
5–10 years of experience supporting Information Assurance, Cybersecurity, Information System Security Officer (ISSO), or Cybersecurity Engineering functions within DoD or Intelligence Community environments.
Experience implementing and supporting the Risk Management Framework (RMF) throughout the system lifecycle.
Strong knowledge of NIST SP 800-53, ICD 503, and DoD cybersecurity policies.
Hands-on experience implementing, maintaining, and remediating Security Technical Implementation Guides (STIGs) across Windows, Linux (RHEL), network, virtualization
Experience executing technical remediation activities for vulnerabilities identified through ACAS, STIG compliance reviews, and other vulnerability management tools.
Experience writing, maintaining, and closing Plan of Action and Milestones (POA&Ms), including documenting remediation evidence and validating corrective actions.
Experience implementing and maintaining Assessment & Authorization (A&A) documentation and supporting RMF continuous monitoring activities.
Experience with security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, or equivalent.
Experience installing, hardening, deploying, documenting, and troubleshooting network perimeter security technologies.
Experience scripting with Unix/Linux (RHEL), Bash, Python, and PowerShell.
Strong analytical, troubleshooting, documentation, and communication skills.
Ability to work independently while managing multiple priorities in a fast-paced environment.

Nice To Haves

DoD 8570/8140 compliant certifications such as Security+, CISSP, CAP, or CASP+
Experience supporting NGA TESR
Experience supporting Intelligence Community Assessment & Authorization processes.
Experience with security automation and Infrastructure-as-Code.
Experience with enterprise SIEM platforms such as Splunk or Elastic.
Intelligence Community Experience preferred

Responsibilities

Implementing and maintaining cybersecurity controls across enterprise infrastructure, including Windows, Linux, virtualization, and cloud environments.
Executing RMF continuous monitoring activities, implementing STIGs, remediating vulnerabilities, managing POA&Ms, and supporting Assessment & Authorization (A&A) efforts in accordance with NIST SP 800-53, ICD 503, and DoD security requirements.
Acting as the representative of the Information System Security Manager (ISSM), ensuring compliance with DoD and Intelligence Community (IC) information security policies, procedures, and directives.
Supporting efforts to operate, maintain, and dispose of information system materials in accordance with RMF, NIST, ICD 503, and applicable security directives, policies, and System Security Plans (SSPs).
Implementing and maintaining Security Technical Implementation Guides (STIGs) across Windows, Linux (RHEL), network, virtualization, and cloud environments to ensure compliance with DoD security requirements.
Executing technical remediation activities to address security findings identified through ACAS, STIG reviews, vulnerability scans, and security assessments.
Managing assigned Plan of Action and Milestones (POA&Ms) by implementing technical solutions, validating remediation efforts, documenting completion evidence, and supporting POA&M closure.
Supporting RMF continuous monitoring activities by implementing required security controls, maintaining A&A documentation, and ensuring compliance with NIST SP 800-53 and ICD 503 requirements.
Generating and implementing required cybersecurity awareness training, ensuring users understand their security responsibilities prior to system access.
Initiating protective and corrective measures when security incidents, vulnerabilities, or compliance issues are identified.
Ensuring IA hardware, software, and operating systems comply with approved security configuration guides and organizational security baselines.
Implementing and enforcing IA policies and procedures as defined by RMF authorization packages and A&A documentation.
Performing Operations & Sustainment (O&S) functions for enterprise network security infrastructure, including firewalls, web gateways, mail gateways, IDS/IPS, load balancers, performance monitoring tools, and management systems.
Performing maintenance, hardening, patching, and advanced configuration of security infrastructure to protect enterprise networks from emerging cyber threats.
Supporting and securing Cloud Infrastructure, including AWS-based technologies.
Utilizing enterprise security tools such as ACAS, HBSS, Carbon Black, Tanium, RedSeal, and related cybersecurity platforms.
Conducting forensic network traffic and log analysis to investigate incidents, isolate issues, and respond to analyst alerts.
Responding to escalated cybersecurity and infrastructure troubleshooting requests.
Maintaining and administering network infrastructure standards, documentation, and fault-tolerant configurations.
Presenting monitoring, testing, compliance, and remediation results and reports as required.
Performing and supporting integration testing, security validation, and operational readiness activities.
Developing automation and scripting solutions using PowerShell, Bash, Python, or similar languages to improve security operations and compliance.
Collaborating with systems, network, and cloud engineering teams to implement secure architectures and operational best practices.
Participating in special projects as required.